This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/nzDQVgvmn8MPp9hP_YWHgwOX3jI.roa File: nzDQVgvmn8MPp9hP_YWHgwOX3jI.roa (raw, json) Hash identifier: oRVvK6JSGXQQlXi5SI+dzEHrPaQ2vh5FEq0UvDnb9/g= Subject key identifier: 9F:30:D0:56:0B:E6:9F:C3:0F:A7:D8:4F:FD:85:87:83:03:97:DE:32 Certificate issuer: /CN=c5662f98020da4e37d50ed3bb30202774f292d7a Certificate serial: 019B77C66D62EA004C7DD0D92E78ACD0C42E Authority key identifier: C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/nzDQVgvmn8MPp9hP_YWHgwOX3jI.roa Signing time: Thu 01 Jan 2026 04:17:31 +0000 ROA not before: Thu 01 Jan 2026 04:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43937 IP address blocks: 87.251.0.0/20 maxlen: 24 93.89.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:6d:62:ea:00:4c:7d:d0:d9:2e:78:ac:d0:c4:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5662f98020da4e37d50ed3bb30202774f292d7a Validity Not Before: Jan 1 04:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f30d0560be69fc30fa7d84ffd8587830397de32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ea:87:d4:83:56:bf:08:3d:d1:e5:52:50:09: 63:ef:da:41:03:10:e5:98:d0:62:db:35:b6:04:b1: 10:0c:f3:b5:4a:2c:f6:43:ba:a5:be:6a:1e:48:9e: 74:c1:3e:ff:16:5b:af:09:49:25:20:ac:53:80:0e: 29:91:2b:82:68:0b:82:ae:3a:1b:50:50:b1:65:5f: df:12:92:f4:8d:c7:e1:84:2a:7f:77:e6:c2:0f:a3: 6f:b3:ea:9e:ec:8c:e3:cb:f0:03:83:00:e8:44:d3: 67:8e:a8:55:a5:84:aa:40:22:8f:7e:0d:46:9d:f9: 70:93:2c:38:ab:34:45:5c:ce:32:f7:e9:ef:94:81: c9:ab:e7:b4:ea:ba:12:02:b1:85:bc:e9:ff:79:2d: b8:bc:4d:7f:99:f5:22:60:f4:2a:b5:4b:18:6b:50: 81:8f:e6:50:89:f2:b6:80:d9:44:51:42:8a:ba:ac: 8d:fe:dd:5d:a0:00:2d:8e:4d:32:45:2e:0c:05:68: 9f:f5:6e:77:2b:92:c3:f9:d1:88:82:51:73:86:21: 3b:2d:4d:4e:e5:5e:2a:ac:49:0e:3d:db:24:96:63: fc:43:b5:3b:0c:c4:92:5a:27:a6:84:54:8a:75:3a: 33:3d:ca:a7:d5:c4:8a:5e:da:22:33:f7:e3:38:cc: 3f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:30:D0:56:0B:E6:9F:C3:0F:A7:D8:4F:FD:85:87:83:03:97:DE:32 X509v3 Authority Key Identifier: keyid:C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/nzDQVgvmn8MPp9hP_YWHgwOX3jI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.251.0.0/20 93.89.16.0/20 Signature Algorithm: sha256WithRSAEncryption a7:ba:8c:0b:c9:bc:97:4e:a3:4e:12:79:08:64:c3:24:21:ed: 50:54:8d:70:f3:53:2f:13:1f:ec:29:96:8b:43:6c:f5:af:84: 4e:6e:49:ed:8a:ef:ec:2a:94:20:c0:2a:25:af:be:8b:1c:36: 94:f7:ac:96:f0:6e:1f:81:44:cc:b5:8e:3e:48:81:c1:c5:53: dc:40:40:6c:3a:6f:55:62:20:d0:c4:e7:0e:42:40:98:92:78: 59:9c:c2:fc:aa:69:02:32:82:d5:50:40:a8:33:a4:6d:d8:d1: 28:f6:71:87:ad:fd:56:06:27:ef:ba:10:24:0d:1f:97:e5:8e: 62:42:78:8b:4d:56:6d:5e:69:35:6a:fe:76:e8:e9:20:ab:9a: be:d4:a0:cb:df:90:05:39:27:2c:11:a7:07:ff:28:4f:b6:2e: 23:00:4d:a1:15:88:0a:e7:02:9c:c8:90:97:62:86:da:ef:7e: 45:ed:23:38:b3:f7:e1:4f:5e:f0:df:76:7e:d7:64:ae:a5:4d: dc:30:da:ef:5e:f9:2a:93:e0:fa:e2:30:45:a5:f5:8b:25:e1: c1:65:ec:f2:87:11:17:22:86:ca:a2:76:73:fc:1e:37:20:e0: b7:81:ae:84:79:ac:f1:97:6f:d9:0e:3d:33:7f:5f:e4:f0:3b: 50:87:70:86 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xm1i6gBMfdDZLnis0MQuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NjYyZjk4MDIwZGE0ZTM3ZDUwZWQzYmIzMDIwMjc3NGYy OTJkN2EwHhcNMjYwMTAxMDQxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjMwZDA1NjBiZTY5ZmMzMGZhN2Q4NGZmZDg1ODc4MzAzOTdkZTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OqH1INWvwg90eVSUAlj79pBAxDl mNBi2zW2BLEQDPO1Siz2Q7qlvmoeSJ50wT7/FluvCUklIKxTgA4pkSuCaAuCrjob UFCxZV/fEpL0jcfhhCp/d+bCD6Nvs+qe7Izjy/ADgwDoRNNnjqhVpYSqQCKPfg1G nflwkyw4qzRFXM4y9+nvlIHJq+e06roSArGFvOn/eS24vE1/mfUiYPQqtUsYa1CB j+ZQifK2gNlEUUKKuqyN/t1doAAtjk0yRS4MBWif9W53K5LD+dGIglFzhiE7LU1O 5V4qrEkOPdsklmP8Q7U7DMSSWiemhFSKdTozPcqn1cSKXtoiM/fjOMw/KwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJ8w0FYL5p/DD6fYT/2Fh4MDl94yMB8GA1UdIwQY MBaAFMVmL5gCDaTjfVDtO7MCAndPKS16MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFdZdm1BSU5wT045VU8wN3N3SUNkMDhwTFhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81ZDZjMTUtYTU4OC00MWRjLWE2YTIt Zjg5OTc3YTQ1YjYwLzEvbnpEUVZndm1uOE1QcDloUF9ZV0hnd09YM2pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi81ZDZjMTUtYTU4OC00MWRjLWE2YTItZjg5OTc3YTQ1YjYw LzEveFdZdm1BSU5wT045VU8wN3N3SUNkMDhwTFhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEV/sAAwQE XVkQMA0GCSqGSIb3DQEBCwUAA4IBAQCnuowLybyXTqNOEnkIZMMkIe1QVI1w81Mv Ex/sKZaLQ2z1r4RObkntiu/sKpQgwColr76LHDaU96yW8G4fgUTMtY4+SIHBxVPc QEBsOm9VYiDQxOcOQkCYknhZnML8qmkCMoLVUECoM6Rt2NEo9nGHrf1WBifvuhAk DR+X5Y5iQniLTVZtXmk1av526Okgq5q+1KDL35AFOScsEacH/yhPti4jAE2hFYgK 5wKcyJCXYoba735F7SM4s/fhT17w33Z+12SupU3cMNrvXvkqk+D64jBFpfWLJeHB ZezyhxEXIobKonZz/B43IOC3ga6Eeazxl2/ZDj0zf1/k8DtQh3CG -----END CERTIFICATE-----Generated at Mon Feb 9 22:23:58 2026 by rpki-client